CVE-2025-0315 — Allocation of Resources Without Limits or Throttling in ollama/ollama

CVE-2025-0315

Allocation of Resources Without Limits or Throttling in ollama/ollama PUBLISHED

Description (CNA)

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

Affected (CNA)

Vendor / product	Versions
ollama / ollama/ollama	affected unspecified through latest

CWE

CWE-770

References

https://huntr.com/bounties/da414d29-b55a-496f-b135-17e0fcec67bc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.